Privacy Policy

Last Updated: 18 July 2026

Bauswip Limited — covering www.bauswip.com, the Focuswip Platform (www.focuswip.com), and the Wazabot Platform (www.wazabot.com)

Bauswip Limited (“Bauswip,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal data in connection with our corporate website at www.bauswip.com (the “Site”), the Focuswip Platform, and the Wazabot Platform. The Site and both Platforms are together referred to as our “Sites.” This includes personal data you submit through a form on the Site — such as the Contact Form, a demo or AI audit request, or a workshop registration (an “Inbound Submission”) — as well as data collected through the Focuswip and Wazabot Platforms.

We are established in Nigeria and primarily comply with the Nigeria Data Protection Act 2023 (“NDPA”) and regulations issued by the Nigeria Data Protection Commission (“NDPC”). Because we also serve visitors and customers in the United States, the United Kingdom, the European Union/EEA, and other African countries, this Privacy Policy is designed to meet the additional requirements that apply when we process personal data of individuals in those regions, including the UK General Data Protection Regulation and EU General Data Protection Regulation (together, “GDPR”), and data protection laws such as South Africa’s Protection of Personal Information Act (POPIA) and Kenya’s Data Protection Act 2019, where applicable. Sections 12 and 13 below set out rights specific to certain regions.

OUR SITES ARE INTENDED FOR USE ONLY BY PERSONS AGED 18 AND ABOVE. WE DO NOT KNOWINGLY COLLECT PERSONAL DATA FROM ANYONE UNDER 18. SEE SECTION 14 (CHILDREN’S PRIVACY).

By accessing or using any of our Sites, you acknowledge that you have read and understood this Privacy Policy.

1. Scope, and Our Role as Controller or Processor

This Privacy Policy applies to personal data that Bauswip processes as a data controller — for example, personal data about you as a Site visitor, an Inbound Submission you make through the Site, a registered Platform Account holder, a prospective customer, or a newsletter subscriber, regardless of where in the world you are located.

Focuswip — processor role.

Where your organisation uses Focuswip to schedule staff, your organisation (the Account holder) is the data controller of the scheduling and staff data entered into the Platform, and Bauswip acts as a data processor (or “processor” under GDPR terminology), processing that data only on your organisation’s instructions and for the purpose of providing the Platform. If you are a staff member whose schedule is managed on Focuswip by your employer, your employer is responsible for that processing, and you should direct data-subject requests to your employer in the first instance. Bauswip will assist the controller in responding to such requests as required under applicable law.

Wazabot — processor role.

Where a business uses Wazabot to handle customer conversations on WhatsApp, that business (the Account holder) is the data controller of its End Customers’ personal data (including message content), and Bauswip acts as a data processor, processing that data only to provide the Wazabot service — including transmitting relevant conversation content to our AI provider to generate a response. If you are an End Customer messaging a business that uses Wazabot, that business is responsible for its own privacy practices, and you should direct privacy questions to that business in the first instance.

The Site — controller role.

For the Site, Bauswip is the data controller of personal data collected directly from visitors and through Inbound Submissions (for example, your Contact Form, demo request, AI audit request, or workshop registration details), since this data is collected by Bauswip for Bauswip’s own purposes rather than on behalf of a customer.

Where required under the NDPA, GDPR, or other applicable law, Bauswip will enter into a written data processing agreement (including, where appropriate, EU/UK standard contractual clauses) with business customers setting out the terms of processing carried out on their behalf. Contact us at the details in Section 18 to request one.

2. Information We Collect

2.1 Information you provide to us

Inbound Submissions: name, email address, phone number, business name, and the details of your enquiry, provided when you use a form on the Site, such as the Contact Form, “Book a Free AI Audit,” “Book a Demo,” “Request Access,” or “Reserve a Seat” (workshop registration);
Account and contact information: name, email address, phone number, business name, and role, provided when you register for a Platform Account, subscribe to our updates, or contact us;
Billing information: billing name, address, and transaction details processed through our payment providers (we do not store full card numbers);
Customer Data you submit to the Platforms: for Focuswip, staff names, roles, availability, and shift data; for Wazabot, WhatsApp Business account details, knowledge-base content, and conversation content between your business and End Customers;
Marketing and communication preferences: information you provide when you subscribe to our newsletter or marketing updates through our email marketing/CRM platform (see Section 6); and
Communications: information you provide when you contact our support team, respond to a survey, or otherwise correspond with us.

2.2 Information collected automatically

Device and usage data: IP address, browser type, operating system, pages visited, referring URLs, and timestamps, collected via server logs and analytics tools on the Site and Platforms;
Email engagement data: whether a marketing or transactional email was delivered, opened, or clicked, collected through our email marketing/CRM platform;
Cookies and similar technologies: small data files used to keep you signed in to a Platform, remember preferences, measure Site traffic and campaign performance, and understand how our Sites are used. You can control cookies through your browser settings; disabling cookies may affect functionality (see Section 15).

2.3 Information from third parties

From Meta / WhatsApp: message metadata and content necessary to deliver Wazabot’s service, subject to Meta’s WhatsApp Business Messaging Policy;
From payment processors (e.g. Paystack, or international processors used for USD/GBP/EUR billing): confirmation of successful payment and limited transaction details;
From identity or business verification services, where used to confirm business account ownership.

3. Our Legal Basis for Processing

We process personal data only where we have a lawful basis to do so. Under the NDPA and, where applicable, GDPR Article 6, our legal bases include:

Consent — where you have given clear consent for a specific purpose, such as receiving marketing emails through our CRM platform;
Performance of a contract, or steps taken at your request before entering one — where processing is necessary to provide our Sites under our Terms of Use, or to respond to an Inbound Submission such as a demo, AI audit, or workshop registration request;
Legitimate interests — where processing is necessary for our legitimate business interests (such as securing our Sites, following up on business enquiries, preventing fraud, or improving our Services) and is not overridden by your rights and interests;
Legal obligation — where processing is necessary to comply with applicable law, including tax, accounting, or regulatory obligations in Nigeria or elsewhere.

Where we rely on your consent, you may withdraw it at any time; this will not affect the lawfulness of processing carried out before withdrawal.

4. AI Processing and Sub-Processors

To provide Wazabot’s AI-powered responses, relevant conversation content and knowledge-base excerpts are transmitted to our AI provider, Anthropic PBC, via its API, solely to generate a response to a specific query. Anthropic does not use data submitted via its API to train its models by default. We use the following categories of sub-processors to operate our Sites:

Anthropic PBC — AI model provider (Wazabot response generation);
Meta Platforms, Inc. — WhatsApp Cloud API (Wazabot messaging transport);
Supabase, Inc. — database hosting, authentication, and vector search (Platforms);
Vercel Inc. — hosting and content delivery for the Site and Platforms;
Paystack (and, for international billing, other payment processors) — payment processing;
Email marketing / CRM platform (e.g. Groundhogg or a similar provider) — handling Inbound Submissions and workshop registrations, and sending newsletters, product updates, marketing communications, and tracking email engagement.

A current list of sub-processors, including the specific email marketing/CRM provider in use at a given time, is available on request at the contact details in Section 18. We require our sub-processors to protect personal data to a standard consistent with the NDPA, GDPR (where applicable), and this Privacy Policy.

5. How We Use Personal Data

to respond to Inbound Submissions, including scheduling a demo, AI audit, or workshop seat you have requested through the Site;
to create and administer your Platform Account and provide the Focuswip and Wazabot Services;
to process payments and manage billing, in Naira or in USD/GBP/EUR for international customers;
to generate AI responses within Wazabot based on the knowledge base and conversation you provide;
to provide customer support and respond to your enquiries;
to monitor, secure, and improve our Sites, including detecting and preventing fraud, abuse, and security incidents;
to send you service-related communications (e.g. billing notices, security alerts, policy updates, or a follow-up to your Inbound Submission), which you cannot opt out of while we are actively handling your enquiry or Account;
to send you marketing communications through our email marketing/CRM platform, where you have opted in or where otherwise permitted by law, and which you may opt out of at any time (see Section 6); and
to comply with our legal and regulatory obligations.

We do not sell personal data to third parties.

6. Marketing Communications and Your Choices

We use an email marketing/CRM platform (such as Groundhogg or a similar provider) to send newsletters, product updates, and promotional communications to subscribers, Inbound Submission contacts, and customers who have opted in, or with whom we have an existing business relationship, as permitted by applicable law.

Every marketing email includes an unsubscribe link. You can withdraw your consent or opt out of marketing emails at any time by using that link or by contacting us directly.
Where you are located in the UK or EU/EEA, we send marketing emails only with your consent (opt-in) or, for existing customers and enquirers, on a soft opt-in basis for similar products/services, in line with UK/EU e-privacy rules; you may object at any time.
Where you are located in the United States, we comply with applicable anti-spam laws (including the CAN-SPAM Act), including honouring opt-out requests promptly.
Opting out of marketing emails does not affect service-related communications necessary to respond to your Inbound Submission or operate your Platform Account (e.g. billing or security notices).

Our email marketing/CRM platform may record whether you opened an email or clicked a link, which we use to understand engagement and improve our communications.

7. How We Disclose Personal Data

We disclose personal data only as described in this Privacy Policy, including to:

Sub-processors and service providers listed in Section 4, who process personal data on our behalf to operate our Sites and send communications;
Professional advisers such as our accountants, auditors, and lawyers, where necessary;
Regulators and law enforcement, where required by applicable law, court order, or a valid request from the NDPC, a UK/EU supervisory authority, or another competent authority;
A successor entity, in connection with a merger, acquisition, financing, or sale of some or all of Bauswip’s assets, subject to that entity honouring the commitments in this Privacy Policy; and
Other parties, with your consent.

8. Cross-Border Data Transfers

We are based in Nigeria, and personal data we collect is generally processed in, or accessible from, Nigeria. Some of our sub-processors (including Anthropic, Meta, Supabase, Vercel, and our email marketing/CRM and payment providers) store or process data outside Nigeria, including in the United States and the European Union.

Transfers out of Nigeria: we transfer personal data outside Nigeria in accordance with the NDPA’s cross-border transfer requirements, relying on an NDPC adequacy decision where available, contractual safeguards with the recipient, or your consent, as applicable.
Transfers from the UK/EEA to Nigeria: where we process personal data of individuals located in the UK or EEA — including Site visitors and Inbound Submissions — and that data is transferred to Nigeria or another country without an applicable adequacy decision, we rely on appropriate safeguards, such as the UK International Data Transfer Addendum or the EU Standard Contractual Clauses, to ensure your data continues to receive an equivalent level of protection.

You may contact us at the details in Section 18 for more information about the safeguards we use for a specific transfer.

9. Data Retention

We retain personal data for as long as necessary to provide our Sites, comply with our legal obligations (including tax and accounting record-keeping requirements in applicable jurisdictions), resolve disputes, and enforce our agreements. Retention periods vary by data type. Inbound Submissions (Contact Form, demo/audit requests, workshop registrations) are generally retained for as long as reasonably necessary to respond to your enquiry and for a limited follow-up period afterward, unless you ask us to delete it sooner. Wazabot conversation content and Focuswip scheduling data are generally retained for the duration of the applicable Account plus a limited period afterward to allow for account recovery, unless the controller (your organisation) instructs earlier deletion or a shorter period applies by law. Marketing contact details are retained until you unsubscribe or request deletion. When personal data is no longer needed, we securely delete or anonymise it.

10. Security

We implement technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, or destruction, including encryption in transit, access controls, and row-level security on our database infrastructure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the NDPC, any other relevant supervisory authority (such as the UK ICO or an EU data protection authority, where required), and affected individuals in accordance with applicable breach notification requirements.

11. Your Rights Under Applicable Data Protection Law

Subject to applicable exceptions, wherever you are located, you generally have the right to:

Access — request confirmation of, and access to, the personal data we hold about you;
Rectification — request correction of inaccurate or incomplete personal data;
Erasure — request deletion of your personal data, subject to our legal retention obligations;
Restriction — request that we limit the processing of your personal data in certain circumstances;
Objection — object to processing based on legitimate interests, including for direct marketing;
Portability — request a copy of personal data you provided to us in a structured, commonly used, machine-readable format;
Withdraw consent — withdraw consent at any time where processing is based on consent; and
Lodge a complaint — lodge a complaint with your local data protection authority (see Sections 12 and 13 for region-specific detail).

If your personal data is processed by us as a processor on behalf of a Focuswip or Wazabot business customer (see Section 1), please direct your request to that business in the first instance; we will support them in responding as required under applicable law. To exercise these rights in relation to data we hold as a controller — including Site and Inbound Submission data — contact us using the details in Section 18. We may need to verify your identity before actioning a request.

12. Additional Rights for EU, UK, and EEA Residents

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the following applies in addition to Section 11:

Our legal bases for processing under GDPR Article 6 are set out in Section 3.
You have the right to lodge a complaint with your local supervisory authority. In the UK, this is the Information Commissioner’s Office (ico.org.uk). In the EU/EEA, you can find your national supervisory authority via the European Data Protection Board (edpb.europa.eu).
Automated decision-making: Wazabot generates AI responses to assist the businesses that use it, but does not itself make decisions producing legal or similarly significant effects about End Customers without the possibility of human involvement. If a Wazabot business customer uses the Platform in a way that does result in such decisions, that business, as controller, is responsible for complying with GDPR Article 22 and providing appropriate safeguards.
Where required because we process EU/UK personal data at scale, we will identify a representative in the EU/UK for GDPR Article 27 purposes and publish that contact here.

[Insert EU/UK Article 27 representative details here, if and once appointed]

13. Additional Disclosures for US Residents

If you are located in the United States, the following applies in addition to Section 11:

We do not sell or share your personal data for cross-context behavioural advertising, and we do not use or disclose sensitive personal data other than as necessary to provide our Sites.
Depending on your state of residence, you may have additional rights to access, delete, correct, or obtain a portable copy of your personal data, and to opt out of certain processing, under applicable state privacy law.
To exercise these rights, contact us using the details in Section 18. We will not discriminate against you for exercising your rights.

14. Children’s Privacy

Our Sites — including the Site, Focuswip, and Wazabot — are intended solely for use by individuals aged 18 and above and are not directed at children. We do not knowingly collect personal data from anyone under 18, including through an Inbound Submission or a Platform Account. If we become aware that we have collected personal data from a person under 18, we will take reasonable steps to delete that data promptly. If you believe a person under 18 has provided us with personal data, please contact us using the details in Section 18.

15. Cookies and Analytics

We use cookies and similar technologies on the Site and Platforms. These fall into a few categories:

Strictly necessary — for example, keeping you signed in to a Platform Account or processing an Inbound Submission form;
Analytics — to help us understand how visitors use the Site and Platforms, and which pages, campaigns, or workshop announcements are effective;
Marketing/engagement — used by our email marketing/CRM platform to measure email opens, clicks, and campaign performance.

You can manage or disable cookies through your browser settings; doing so may limit some functionality of our Sites. Where required by UK/EU law, we will request your consent before setting non-essential cookies on the Site.

16. Links to Third-Party Sites and Services

Our Sites may contain links to, or integrate with, third-party websites and services (such as WhatsApp, or external resources referenced in our blog or case studies) that are not operated by us. This Privacy Policy does not apply to those third-party services, and we encourage you to review their privacy policies before providing personal data to them.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our sub-processors (including our email marketing/CRM provider), or applicable law. Where changes are material, we will provide reasonable notice (for example, by email, an in-app notice, or a notice on the Site) before they take effect. The “Last Updated” date at the top of this page indicates when this Privacy Policy was last revised.

18. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Bauswip Limited
RC 1514400
No 8, Road 5b, Ogunfayo Estate, Ibeju-Lekki, Lagos
beepus@bauswip.com
+2348075561510